Using NAND-AID to repair a broken eMMC (fix 160-0103 system memory error)

Warning


This tutorial is only for advanced users and has a serious risk of bricking the console. Make sure you read it completely before executing any step and that you understand every step and its implications.

While not strictly required, it is still recommended to install ISFShax, before soldering NAND-AID. In case something goes wrong, this then gives more options to troubleshoot the problem.

What is this for?


If you are encountering Error Code 160-0103 "There is a Problem with the system memory" or your Wii U is freezing at bootup it is likely that the eMMC Chip is failing.
This tutorial goes into fixing this Error 160-0103, by cloning your MLC to a SD card and fixing corruptions while doing so. This can become useful if the MLC (eMMC) chip is hardware damaged.

Please note: There are other possible causes for the 160-0103 error (like a CBHC brick).
Also we found other ways to fix this problem. To find the the procedure which is right for you follow the Ultimate Wii U Troubleshooting Guide
In short the other options are:

1690709917882.png


NOTE: In case you can't boot the recovery menu anymore, there is the option of dumping the eMMC using a Cardreader connected to the big pads on the NAND-AID. Else you can use defuse to rebuild a completely fresh MLC instead, so head over to https://gbatemp.net/threads/how-to-upgrading-rebuilding-wii-u-internal-memory-mlc.636309/

NOTE²: In case you get a purple LED but no screen output you might still be able to use the recovery menu blindly. TODO: Give exact steps for this.

Prerequisites


Use this fork of the recovery menu.
Use this fork of wupclient.

1692774079735.png


Before beginning use the recovery menu to dump the syslogs, then search all the .log files for MEDIA ERROR and DATA CORRUPTION.

Only errors concerning the dev:mlc01 are relevant. Here the example for such an error:
Code:
10:48:16:325: FSA: ### MEDIA ERROR ###, dev:mlc01, err:-2228230, cmd:11, path:(null)
Errors concerning the optical disc drive (dev:odd01) can be ignored. Here is such an example, that can be ignored:
Code:
10:48:16:325: FSA: ### MEDIA ERROR ###, dev:odd01, err:-2228230, cmd:11, path:(null)

A media error on mlc01 means the eMMC itself noticed it can no longer retrieve the data error free and indicates a failure of the eMMC.

In case you find a MEDIA ERROR show us the log file, please, so we can add it to https://hackmd.io/d12Fq9g-QlCjN2HJp7Yvew. It's fine to DM the log to @SDIO, @Lazr1026 or me in case you're concerned about the serial number.

In case you find DATA CORRUPTION only this might or might not be a damaged eMMC. It's recommended to show us the logs, too, so we can analyze them more deep. DATA CORRUPTION means the file system of the Wii U detected that a file is corrupted. That could be caused by either a bad eMMC chip or if a write got interrupted (e. g. power loss during save)

Required Knowledge


WARNING: Before you begin, doing anything to mlc/emmc, you need to understand a few core concepts. Make sure to read carfully and be aware of the implications, or you can seriously mess things up, loosing all data. If that happens you need defuse as descibed here.

The Wii U has not just one internal storage, but it has 3:
  • SLCCMPT: Holds all the vWii stuff, the system, the saves, the WiiWare tiles, we don't care for it in this tutorial.
  • MLC: Is where all your userdata goes, like games, saves, your accounts and it also hold the system applications. It's also called eMMC and what this tutorial is about.
  • SLC: Holds the second stage bootloader (boot1), the core Operating Systems (IOSU and CafeOS), the tickets for the installed titles (eShop and system apps), and some config files. Besides that it holds a file "scfm.img".
    This file is used as a block level write cache for the MLC. This means part of the MLC state resides in this file. They need always to be treated as one, if you restore one, you need also to restore the other. If they don't match, because you restored an older version of the mlc for example, the filesystem on top of them will become inconsistent and there will be no way of fixing that. You would either have to restore an older backup of both the SLC and the MLC or you would need to format the MLC. Both are things we try to avoid here.
You always have to carry the current state of the MLC forward.

What you can do: Read the dying eMMC to an Image, then clone it to a SD card and then use the SD card in place of the eMMC, without turning the console on in between.
You could then also read back the state of the current state of the SD card and flash it back to the eMMC and then run off the eMMC again. But only if you don't turn on the Wii U between the read and the swap.

What you can not do: Read the eMMC to an image, then use the console and then replace the eMMC by an SD card with that older image. Because then the SD won't have the current state.
You also can't flash an Image to the SD, use it for a while and then flash the image back a second time.

Where to get a NAND-AID from?


It's always a good idea to ask if someone near you has one. They might be willing to sell it for cheap.
Else here are some available for 3 € : https://gbatemp.net/threads/637225/

If that doesn't work for you you can also go to some PCB manufacturer like https://jlcpcb.com and let them do the printing. This is around $30 for 5 PCBs, so you could resell 4 to other users. The gerber file is available here and the important options are a thickness of 0.6 mm and castellated holes.

Dumping old MLC


Now that you confirmed it's really a hardware damaged MLC it's time to replace and fix it:
  1. Use the recovery menu to dump OTP + SEEPROM.

  2. Dump MLC + SLC from within the recovery menu. Turn your Wii U off by pulling the power cable and don't turn it back on until you replaced the eMMC with the SD card.
    1690709969015.png

    Note: Errors while dumping SLC are harmless and I would be surprised if you get no errors on MLC as it's hardware damages after all.

  3. Merge the dump on the PC, for Windows use copy /b mlc.bin.part01 + mlc.bin.part02 + (...) + mlc.bin.part15 mlc.bin. For linux or mac os x use cat mlc.bin.part* > mlc.bin
  4. Write the MLC dump onto a SD card with the same size of your MLC. So for a 8 GB unit use a 8 GB card and for a 32 GB console use a 32GB card (64GB won't work). 8 GB units can also use 16GB cards, but only 8GB will be usable.
    We currently recommend SanDisk Max Endurance cards for this but other cards have been used, too. Choice is yours.
    On Windows you can use Win32DiskImager or Etcher to write the mlc.bin to the SD card.
    On Linux you can use: dd if=mlc.bin of=/dev/XXX bs=1M status=progress Replace XXX with the name of the block device if the sdcard. You can use lsblk to figure out the name. Also make sure the sd card isn't mounted. Optionally to improve the performance, you can try to run blkdiscard -f first (before the dd) on the SD and then add the conv=sparse option to the dd command.

Soldering NAND-AID


  1. Cut the CLK line (R26) - using a scalpel or an x-acto knife - to disable the eMMC.
    1690709997093.png

  2. Install the NAND-AID and insert the SD. For soldering the NAND-AID it's recommend to first solder the big GND VIA. Since v3.0 you'll see a uncovered VIA on the Wii Us motherboard through this GND hole. This VIA is GND, too, so it doesn't matter if you short with it. Also since v3.0 there's a GND arm right nex to the hole in case you want to solder an alternative GND connection instead.

    The board will suck lots of the heat away, so you need some patience and really need to make sure the solder properly flows. Check that the connections really holds, before you move on to the rest. To make soldering easier, you should first tin the GND pad on the board, so it has fresh solder and preheating the board also helps.

    After GND solder the data connections to the pads/resistors on the board.

    Add the wire for 3V3. Then add the SD slot and after that the capacitor. Also short the DSB pads, which shorts the eMMC CLK to GND. If you ever want to access the eMMC again, you need to open the DSB jumper again.
    1690710029169.png
    1690360176330.png


    NOTE: On some old board revisions there's a capacitor in the way. It's save to just remove it.
    1690710054698.png

    1690710070025.png

    1690710084431.png


    NOTE²: In case you're kind of a patchwork person you can also use a microSD to SD adapter and a capacitor instead of the NAND-AID. How to do this is out of scope of this tutorial through, so you are a bit on your own. See this post for more details: https://gbatemp.net/threads/using-n...0103-system-memory-error.636361/post-10213230
    IMG_20230401_174716.jpg

    1690359335313.png

    TODO: Show adapter installed into a Wii U.

Repairing the corruption


  1. Boot to the recovery menu again, then start the network and wupserver.
    1690710121340.png

    TODO: Add how to add network config to the SD card

  2. Run MLC Checker from recovery and inspect your mlcchecker.txt log.
    • For corrupted files inside of /vol/storage_mlc01/usr/title/ use wupservers delete_title() option, so for example delete_title("/vol/storage_mlc01/usr/title/00050000/1010ED00").
    • For corrupted files inside of /vol/storage_mlc01/sys/title/ use the Install WUP option to reinstall the corresponding system title. It's recommended to do this as a last step. Also some titles might not interrupt the boot, so you could even reinstall them with NUSspli as a very last step.
    • For corrupted folders: These can't be deleted but we have to move them. Even if moved, these still crash a factory reset (so don't do one) The only way to get rid of them is a reformat (see https://gbatemp.net/threads/how-to-upgrading-rebuilding-wii-u-internal-memory-mlc.636309/ ) TODO: Add how to move them while keeping quotas in mind. In case these folders where in /vol/storage_mlc01/sys/ the corresponding title needs to get reinstalled afterwards.
    • For corrupted files at other subfolders in /vol/storage_mlc01/usr/ it should be save to delete the files (with wupclients w.rm()], so for example w.rm("/vol/storage_mlc01/usr/save/00050000/1010ed00/user/80000002/userdata.dat"). This might damage savefiles and stuff through, so always make sure that you know what you're deleting and how to fix the result then (for example by deleting the games save from data management). In case you are unsure ask before doing something stupid!
    • For other corrupted files in /vol/storage_mlc01/sys/ ask us what to do!
    Lastly run flush_mlc() in wupclient.

  3. Run the MLC Checker again to see if you missed anything.
Your Wii U should now work normally again.

Bonus: Work around factory reset crash loop


There are some rare cases where users tried a factory reset while having corrupted folders. This results in a crash loop.

To break out of this loop you first have to install NAND-AID and fix the corruptions as told above. After that use wupclients delete_title() function to remove all titles from /vol/storage_mlc01/usr/title/. Lastly select Set Initial Launch from the recovery menu and then select 0 - Initial Setup.

See also


https://gbatemp.net/threads/how-i-fixed-160-0103-system-memory-error.626448/
https://www.boards.ie/discussion/2058305084/my-wii-u-it-met-with-a-terrible-fate
https://gbatemp.net/threads/how-to-upgrading-rebuilding-wii-u-internal-memory-mlc.636309/

Thanks


@SDIO For figuring anything out, doing all of the hard puzzling and coding night and day to make this possible
@GaryOderNichts For the recovery menu
@Nandster For the pictures as well as for documenting the whole process over at boards.ie
@Voultar For the NAND-AID PCB design
@skawo For providing an earlier Tutorial, we take some passages from
 
Last edited by SDIO,

my2k2zx2

Well-Known Member
Member
Joined
Jun 5, 2008
Messages
121
Trophies
1
XP
1,602
Country
United States
3rd option did boot to the Wii menu, but then kicked to a 160-0103 error.

Other console goes to blue led when the power button is pushed, and that's it. no display, never able to get the pi pico menu to function, pushing eject activates the drive, so I dont think it's navigating the recovery menu.
 

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,450
Trophies
0
Age
28
XP
1,709
Country
Germany
3rd option did boot to the Wii menu, but then kicked to a 160-0103 error.
OK, in minute go to backup and restore and dump the system crash logs there and then zip them and post them here.

Other console goes to blue led when the power button is pushed, and that's it. no display, never able to get the pi pico menu to function, pushing eject activates the drive, so I dont think it's navigating the recovery menu.
Then the OS is crashing too early. You can either bet on an eMMC problem and dump it in hardware and replace it or you defuse and see whats up.
 

my2k2zx2

Well-Known Member
Member
Joined
Jun 5, 2008
Messages
121
Trophies
1
XP
1,602
Country
United States
OK, in minute go to backup and restore and dump the system crash logs there and then zip them and post them here.


Then the OS is crashing too early. You can either bet on an eMMC problem and dump it in hardware and replace it or you defuse and see whats up.
Is this the right zip file for the crash logs?
 

Attachments

  • logs.zip
    78.5 KB · Views: 7

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,450
Trophies
0
Age
28
XP
1,709
Country
Germany
Code:
00:00:34:757: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:815: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:874: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:933: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:992: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00;00;34;873: FS: READ_FILE      upid:[ 2] sts:[DATA_CORRUPTED] hnd:[0x3bd0648] dst:[0x3d8576c0] size:[1] cnt:[1048576] pos:[0]
There is a DATA CORRUPTION ERROR which is causing the 160-0103. This can either be causes by a bad eMMC or if the console was turned off while writing the data.
I would suggest you now use UDPIH to run the MLC checker to get a better picture of it's state.
 

my2k2zx2

Well-Known Member
Member
Joined
Jun 5, 2008
Messages
121
Trophies
1
XP
1,602
Country
United States
Code:
00:00:34:757: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:815: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:874: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:933: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00:00:34:992: FSA: ### DATA CORRUPTION ERROR ###, dev:mlc01, err:-1245211, cmd:11, path:(null)
00;00;34;873: FS: READ_FILE      upid:[ 2] sts:[DATA_CORRUPTED] hnd:[0x3bd0648] dst:[0x3d8576c0] size:[1] cnt:[1048576] pos:[0]
There is a DATA CORRUPTION ERROR which is causing the 160-0103. This can either be causes by a bad eMMC or if the console was turned off while writing the data.
I would suggest you now use UDPIH to run the MLC checker to get a better picture of it's state.

Not sure what I'm doing wrong, but I can only get the minute menu to boot. Is there something different I'm missing to get the pico pi to load up anymore.
 

my2k2zx2

Well-Known Member
Member
Joined
Jun 5, 2008
Messages
121
Trophies
1
XP
1,602
Country
United States
You can share the log so we can see what kind of error. But so many errors must be a bad eMMC
Found these 2 files on the sd card after running the mlc and slc checker.
 

Attachments

  • mlc_checker.txt
    99 bytes · Views: 6
  • slc_checker.txt
    31 bytes · Views: 5

SDIO

Well-Known Member
Member
Joined
Feb 13, 2023
Messages
2,450
Trophies
0
Age
28
XP
1,709
Country
Germany
Yes that is bad eMMC. Should be replaced. You can use a MLC2SD for that or redNAND if you don't want to solder
 

my2k2zx2

Well-Known Member
Member
Joined
Jun 5, 2008
Messages
121
Trophies
1
XP
1,602
Country
United States
Yes that is bad eMMC. Should be replaced. You can use a MLC2SD for that or redNAND if you don't want to solder

I'm ok with trying the nand-aid install. Should I get 2 and do the same thing with the other console? Or is the 2nd console too far gone with no recovery menu loading?
 
Last edited by my2k2zx2,

V10lator

Well-Known Member
OP
Member
Joined
Apr 21, 2019
Messages
2,685
Trophies
1
Age
36
XP
5,670
Country
Germany
Or is the 2nd console too far gone with no recovery menu loading?
Sometimes dumping the original eMMC in hardware, then cloning that onto an SD card is enough for the recovery menu to work again. No guarantee through.
If it won't work there's still de_fuse to format an SD card as a new eMMC (data loss) but that's more soldering work.
 

my2k2zx2

Well-Known Member
Member
Joined
Jun 5, 2008
Messages
121
Trophies
1
XP
1,602
Country
United States
Sometimes dumping the original eMMC in hardware, then cloning that onto an SD card is enough for the recovery menu to work again. No guarantee through.
If it won't work there's still de_fuse to format an SD card as a new eMMC (data loss) but that's more soldering work.
These were sent my way as junk consoles, so I'm not worried about any data loss if it comes to that.
Do you still have the nand-aids available?
 

muslimsteel

Member
Newcomer
Joined
Nov 10, 2022
Messages
7
Trophies
0
Age
40
XP
28
Country
United States
Hello all, first of all, thank you for all the work that has been done to keep this wonderful console running! The WiiU that I have has been modded for a few years now and has been very loved. Recently it would not power on past the WiiU boot screen, so I started researching and found that the eMMC is corrupted using the Ultimate Troubleshooting guide.

My situation is slightly different than many of the documents that I have encountered though, where when I try to use the Recovery Menu, I do not get the menu to display, it is just stuck at the WiiU screen. The menu was in fact loaded though as the LED light changed to indicate that and I was able to navigate blindly it around enough to get Minute installed. Using Minute the menu displays there and I was able to dump the SEEPROM & OTP and SLC.RAW from there, but there is not an option to dump the MLC. I read somewhere that if I use the Format RedNAND option it will clone the content from the MLC etc to an SD Card, so I did that.

So now I have an SD card with everything cloned to it, but I am stuck on what to do next. I need to dump the MLC image from that SD card but I have not found a method for that. None of the partitions have the MLC.bin files so I cannot use the method in this guide. I was messing around with wfs-tools and wfs-extract to see if I could extract it from there but it would not work (different errors depending on what I tried).

Would someone be able to help me get past this step so I can get the new SD card set up for the NAND-AID? Thanks!!

Side note: I have the MLC.bin files from when I first modded the WiiU and last ditch effort I could use that, but would really like to get the data back since then.
 

Site & Scene News

Popular threads in this forum

General chit-chat
Help Users
  • K3Nv2 @ K3Nv2:
    I don't care about the square screen it's just nice to hold something you don't have to stretch your arms a foots length
  • K3Nv2 @ K3Nv2:
    All these things expecting to be super huge is overrated just run a type c cable to your TV if you want a big display or in my case screen mirror it
  • BigOnYa @ BigOnYa:
    On the go tho I meant, I use my 10" tablet and a Bluetooth controller for retro gaming while sitting on my porch or on long car rides sometimes. Easier on my eyes than the Switch screen.
  • K3Nv2 @ K3Nv2:
    My point is we already have enough shit with big displays having something pocketable with up to ps2 would be fine on the go
    +1
  • Psionic Roshambo @ Psionic Roshambo:
    Ken unless the games are made for that screen size most suck on a screen that size... Having a square screen and being brighter and higher res helps but it's not a cure all, text is tiny bullets are tiny, your.... Well lol
  • K3Nv2 @ K3Nv2:
    You can stretch to fit probably it's not all bad that they make it seem to be
  • K3Nv2 @ K3Nv2:
    People always yap about oh but you loose pixels but yeah it won't look awful either
  • Psionic Roshambo @ Psionic Roshambo:
    I like filters :P
  • K3Nv2 @ K3Nv2:
    Filters are why you don't go on 2nd dates
  • Psionic Roshambo @ Psionic Roshambo:
    Lol nahhh it's because I usually get what they want on the first date lol
  • Psionic Roshambo @ Psionic Roshambo:
    I swear if I hear "I don't usually do this on the first date" on more time... I am going to start counting
  • K3Nv2 @ K3Nv2:
    I bought you McDonald's even tho you lied about your pics I still deserve this
  • Psionic Roshambo @ Psionic Roshambo:
    No no continue, I hear these things women say so often I decided to start counting
  • K3Nv2 @ K3Nv2:
    I tried that new Pepsi lime it just taste like pepsi
  • DTApple @ DTApple:
    With lime, right?
  • K3Nv2 @ K3Nv2:
    Just pepsi lol
  • K3Nv2 @ K3Nv2:
    Oh yeah it's D-Days 80th anniversary today
  • BigOnYa @ BigOnYa:
    I drink the Coke with lime all the time, in my Spiced rum (Captain Morgans) I hate pepsi
  • K3Nv2 @ K3Nv2:
    Probably better just to jizz a lime squeeze inside it
  • DinohScene @ DinohScene:
    volvic > anything else
  • K3Nv2 @ K3Nv2:
    My piss is water
    K3Nv2 @ K3Nv2: https://computers.woot.com/offers/linksys-dual-band-mesh-wifi-6-router-10?utm_medium=share&utm_so...